DOCSLIB.ORG

Automated Malware Analysis Report For

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Automated Malware Analysis Report For ID: 398190 Cookbook: browseurl.jbs Time: 04:57:58 Date: 27/04/2021 Version: 31.0.0 Emerald Table of Contents Table of Contents 2 Analysis Report https://t.co/zi3FWnDVDp 4 Overview 4 General Information 4 Detection 4 Signatures 4 Classification 4 Startup 4 Malware Configuration 4 Yara Overview 4 Sigma Overview 4 Signature Overview 4 Mitre Att&ck Matrix 5 Behavior Graph 5 Screenshots 6 Thumbnails 6 Antivirus, Machine Learning and Genetic Malware Detection 7 Initial Sample 7 Dropped Files 7 Unpacked PE Files 7 Domains 7 URLs 7 Domains and IPs 8 Contacted Domains 8 Contacted URLs 8 URLs from Memory and Binaries 8 Contacted IPs 8 Public 9 Private 9 General Information 9 Simulations 9 Behavior and APIs 9 Joe Sandbox View / Context 10 IPs 10 Domains 10 ASN 10 JA3 Fingerprints 10 Dropped Files 10 Created / dropped Files 10 Static File Info 15 No static file info 15 Network Behavior 15 Network Port Distribution 15 TCP Packets 15 UDP Packets 17 DNS Queries 17 DNS Answers 17 HTTPS Packets 17 Code Manipulations 18 Statistics 18 Behavior 18 System Behavior 19 Analysis Process: iexplore.exe PID: 5732 Parent PID: 792 19 General 19 File Activities 19 Copyright Joe Security LLC 2021 Page 2 of 20 Registry Activities 19 Analysis Process: iexplore.exe PID: 5780 Parent PID: 5732 19 General 19 File Activities 19 Registry Activities 20 Disassembly 20 Copyright Joe Security LLC 2021 Page 3 of 20 Analysis Report https://t.co/zi3FWnDVDp Overview General Information Detection Signatures Classification Sample URL: https://t.co/zi3FWnD No high impact signatures. VDp Analysis ID: 398190 Infos: Most interesting Screenshot: Ransomware Miner Spreading mmaallliiiccciiioouusss malicious Evader Phishing sssuusssppiiiccciiioouusss suspicious cccllleeaann clean Exploiter Banker Spyware Trojan / Bot Adware Score: 0 Range: 0 - 100 Whitelisted: false Confidence: 80% Startup System is w10x64 iexplore.exe (PID: 5732 cmdline: 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding MD5: 6465CB92B25A7BC1DF8E01D8AC5E7596) iexplore.exe (PID: 5780 cmdline: 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5732 CREDAT:17410 /prefetch:2 MD5: 071277CC2E3DF41EEEA8013E2AB58D5A) cleanup Malware Configuration No configs have been found Yara Overview No yara matches Sigma Overview No Sigma rule has matched Signature Overview Copyright Joe Security LLC 2021 Page 4 of 20 • Compliance • Networking • System Summary Click to jump to signature section There are no malicious signatures, click here to show all signatures . Mitre Att&ck Matrix Command Remote Initial Privilege Defense Credential Lateral and Network Service Access Execution Persistence Escalation Evasion Access Discovery Movement Collection Exfiltration Control Effects Effects Impact Valid Windows Path Process Masquerading 1 OS File and Remote Data from Exfiltration Encrypted Eavesdrop on Remotely Modify Accounts Management Interception Injection 1 Credential Directory Services Local Over Other Channel 2 Insecure Track Device System Instrumentation Dumping Discovery 1 System Network Network Without Partition Medium Communication Authorization Default Scheduled Boot or Boot or Process LSASS Application Remote Data from Exfiltration Non- Exploit SS7 to Remotely Device Accounts Task/Job Logon Logon Injection 1 Memory Window Desktop Removable Over Application Redirect Phone Wipe Data Lockout Initialization Initialization Discovery Protocol Media Bluetooth Layer Calls/SMS Without Scripts Scripts Protocol 1 Authorization Domain At (Linux) Logon Script Logon Obfuscated Files Security Query SMB/Windows Data from Automated Application Exploit SS7 to Obtain Delete Accounts (Windows) Script or Information Account Registry Admin Shares Network Exfiltration Layer Track Device Device Device (Windows) Manager Shared Protocol 2 Location Cloud Data Drive Backups Behavior Graph Copyright Joe Security LLC 2021 Page 5 of 20 Hide Legend Behavior Graph Legend: ID: 398190 Process URL: https://t.co/zi3FWnDVDp Signature Startdate: 27/04/2021 Created File Architecture: WINDOWS DNS/IP Info Score: 0 Is Dropped Is Windows Process Number of created Registry Values favicon.ico started Number of created Files Visual Basic Delphi iexplore.exe Java .Net C# or VB.NET C, C++ or other language 2 61 Is malicious Internet started iexplore.exe 2 36 t.co auspost-mypost-track.from-id.com 192.168.2.1 104.244.42.133, 443, 49680, 49681 66.29.133.243, 443, 49682, 49683 unknown TWITTERUS ADVANTAGECOMUS unknown United States United States Screenshots Thumbnails This section contains all screenshots as thumbnails, including those not shown in the slideshow. Copyright Joe Security LLC 2021 Page 6 of 20 Antivirus, Machine Learning and Genetic Malware Detection Initial Sample Source Detection Scanner Label Link https://t.co/zi3FWnDVDp 0% Virustotal Browse https://t.co/zi3FWnDVDp 0% Avira URL Cloud safe Dropped Files No Antivirus matches Unpacked PE Files No Antivirus matches Domains No Antivirus matches URLs Source Detection Scanner Label Link https://auspost-mypost-track.from-id.com/do/-track.from-id.com/o/Root 0% Avira URL Cloud safe https://auspost-mypost-track.from-id.com/o/ 0% Avira URL Cloud safe https://auspost-mypost-track.from-id.com/do/Root 0% Avira URL Cloud safe Copyright Joe Security LLC 2021 Page 7 of 20 Source Detection Scanner Label Link https://auspost-mypost-track.from-id.com/o/z 0% Avira URL Cloud safe getbootstrap.com) 0% Avira URL Cloud safe Domains and IPs Contacted Domains Name IP Active Malicious Antivirus Detection Reputation t.co 104.244.42.133 true false high auspost-mypost-track.from-id.com 66.29.133.243 true false unknown favicon.ico unknown unknown false unknown Contacted URLs Name Malicious Antivirus Detection Reputation https://auspost-mypost-track.from-id.com/ false unknown https://auspost-mypost-track.from-id.com/do/ false unknown URLs from Memory and Binaries Name Source Malicious Antivirus Detection Reputation https://auspost-mypost-track.from-id.com/do/ {E7359BFB-A74F-11EB-90E4-ECF4B false unknown B862DED}.dat.1.dr, ~DF634290F9 B3C49363.TMP.1.dr www.apache.org/licenses/LICENSE-2.0 bootstrap.min[1].css.2.dr false high https://auspost-mypost-track.from-id.com/do/-track.from- {E7359BFB-A74F-11EB-90E4-ECF4B false Avira URL Cloud: safe unknown id.com/o/Root B862DED}.dat.1.dr https://auspost-mypost-track.from-id.com/o/ ~DF634290F9B3C49363.TMP.1.dr false Avira URL Cloud: safe unknown https://auspost-mypost-track.from-id.com/do/Root {E7359BFB-A74F-11EB-90E4-ECF4B false Avira URL Cloud: safe unknown B862DED}.dat.1.dr https://auspost-mypost-track.from-id.com/o/z {E7359BFB-A74F-11EB-90E4-ECF4B false Avira URL Cloud: safe unknown B862DED}.dat.1.dr getbootstrap.com) bootstrap.min[1].css.2.dr false Avira URL Cloud: safe low Contacted IPs No. of IPs < 25% 25% < No. of IPs < 50% 50% < No. of IPs < 75% 75% < No. of IPs Copyright Joe Security LLC 2021 Page 8 of 20 Public IP Domain Country Flag ASN ASN Name Malicious 66.29.133.243 auspost-mypost- United States 19538 ADVANTAGECOMUS false track.from-id.com 104.244.42.133 t.co United States 13414 TWITTERUS false Private IP 192.168.2.1 General Information Joe Sandbox Version: 31.0.0 Emerald Analysis ID: 398190 Start date: 27.04.2021 Start time: 04:57:58 Joe Sandbox Product: CloudBasic Overall analysis duration: 0h 2m 32s Hypervisor based Inspection enabled: false Report type: light Cookbook file name: browseurl.jbs Sample URL: https://t.co/zi3FWnDVDp Analysis system description: Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211 Number of analysed new started processes analysed: 4 Number of new started drivers analysed: 0 Number of existing processes analysed: 0 Number of existing drivers analysed: 0 Number of injected processes analysed: 0 Technologies: HCA enabled EGA enabled AMSI enabled Analysis Mode: default Analysis stop reason: Timeout Detection: CLEAN Classification: clean0.win@3/14@3/3 Cookbook Comments: Adjust boot time Enable AMSI Browsing link: https://auspost-mypost-track.from- id.com/ Warnings: Show All Exclude process from analysis (whitelisted): taskhostw.exe, ielowutil.exe TCP Packets have been reduced to 100 Excluded IPs from analysis (whitelisted): 88.221.62.148, 152.199.19.161 Excluded domains from analysis (whitelisted): e11290.dspg.akamaiedge.net, iecvlist.microsoft.com, go.microsoft.com, ie9comview.vo.msecnd.net, go.microsoft.com.edgekey.net, cs9.wpc.v0cdn.net Simulations Behavior and APIs No simulations Copyright Joe Security LLC 2021 Page 9 of 20 Joe Sandbox View / Context IPs No context Domains No context ASN No context JA3 Fingerprints No context Dropped Files No context Created / dropped Files C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{E7359BF9-A74F-11EB-90E4-ECF4BB862DED}.dat Process: C:\Program Files\internet explorer\iexplore.exe File Type: Microsoft Word Document Category: dropped Size (bytes): 30296 Entropy (8bit): 1.8541284057279128 Encrypted: false SSDEEP: 192:rFZWZk2TWJutJlfJ/lMICBIBurfBuscsX:rLSzqJOJ9J+ICBIBurBusl MD5: 1D0CF13960287A3F78D182E4842A73B4 SHA1: 9FCD946292ABC924AE5EF4D9E9745990FB553901 SHA-256: FAA3E73D72507C7A769319DC130ACA752E4FBD8B709C03CE6241ACD7C4C81516 SHA-512: 111C72389A0A6A75E89DEAADCADCB3F7DF3BC5F384C8DCF029826135012B30C2D8BE580556DB417BFF5618D7D75E6088F36BD0C925CF5EC7758408A849ABC96 4 Malicious: false Reputation: low Preview: .............................................................................................................................................................................................................................................................................
Load more

Recommended publications
  • Initial Release · Version 1.02 · December 2, 2016 ™
    Overpass Mono™ Initial Release · Version 1.02 · December 2, 2016 Overpass Mono Refactoring The Cathedral and the Bazaar Musings on Linux and Open Source by an Accidental Revolutionary import java.util.StringTokenizer; import java.util.StringTokenizer; public class StringTokenizerReturnTokensAsOb- public class StringTokenizerReturnTokensAsOb- jectsExample { jectsExample { public static void main(String[] args) { public static void main(String[] args) { //create StringTokenizer object //create StringTokenizer object StringTokenizer st = new StringTokenizer st = new StringTokenizer("Java StringTokenizer Exam- StringTokenizer("Java StringTokenizer Exam- ple"); ple"); //iterate through tokens using has- //iterate through tokens using has- MoreElements() method MoreElements() method while(st.hasMoreElements()){ while(st.hasMoreElements()){ System.out.println(st.nextElement()); System.out.println(st.nextElement()); } } } } } } 2 Overpass Mono About the Typeface Overpass is a bespoke typeface designed by Delve Fonts Red Hat has generously made the Overpass family freely between 2011–2016 on commission from Red Hat, Inc. with available to the public under the SIL Open Font License direction provided by Andy Fitzsimon, Jakub Steiner, and The GNU Lesser General Public License (LGPL). and Ben Dubrovsky. Designers: Delve Withrington and Dave Bailey The design of Overpass is an interpretation of the rather well-known “Highway Gothic” letterforms from Year Created: 2016 the Standard Alphabets for Traffic Control Devices published by the U.S. Federal
    [Show full text]
  • Brand Identity & Style Guide
    Brand Identity & Style Guide Version 1.0 – April 2018 Contents BRAND OUR VISUAL PHOTOGRAPHY ADDITIONAL 1 MESSAGES 2 IDENTITY 3 GUIDELINES 4 DOCUMENTS 1.1 Introduction 2.1 Visual elements overview 3.1 Image types 1.2 Our brand manifesto 2.2 Our logo 3.2 Products and the environment 2.3 Brand colours 3.3 Customers 2.4 Typography 2.5 Components 2.6 Product naming 2.7 Layout 2.8 Dual branding Brand Identity & Style Guide V1.0 – April 2018 2 01 Brand Messages Brand Identity & Style Guide V1.0 – April 2018 3 1.1 – INTRODUCTION Brand Consistency Great brands are built through the consistent delivery of the brand and it’s messages through “DETAILS ARE NOT all touch-points – a strong, unified message reinforces not only who we are and why we exist, it also drives recognition, trust, success, and of THE DETAILS. THEY course, ultimately, business growth. This document is a guide to how we visually MAKE THE DESIGN.” represent Spaces to our customers. It covers all our key brand elements, and should be – CHARLES EAMES. used as a rulebook and a compass to navigate us through all the visual touchpoints of the brand. Brand Identity & Style Guide V1.0 – April 2018 4 1.2 – OUR BRAND MANIFESTO Our Brand Manifesto We believe work is about people and ideas. Our Spaces By creating dynamic workspaces with a unique and Creative workspaces are inhabited by forward thinkers, innovators and entrepreneurial spirit we help you think, create and with a unique game changers who are confident in achieving their collaborate while our friendly team sees to all of the goals.
    [Show full text]
  • A Type Specimen Book
    just my type a &type specimen book Table of 3 Contents 5 7 9 11 13 15 17 19 21 23 25 27 29 &1 Table of 3 Contents. .Minion Pro 5 . .Baskerville 7 . Didot 9 . Rockwell 11 . Gill Sans 13 . .Helvetica Neue 15 . Futura 17 . Bickham Script 19 . Cooper Black 21 . Merriweather 23 . Roboto Condensed 25 . Limelight 27 . .Amatic Sc 29 . Overpass Mono 2 Minion Pro(72 pt Regular) Minion Pro is an old style serif typeface designed by Robert Slimbach in 1990. (24 pt Regular) A B C D E F G H I J K L M {N O P Q R S T U V W X Y Z} a b c d e f g h i j k l m { n o p q r s t u v w x y z } (24 pt Regular) g3 Regular Italic Medium Medium Italic Semibold Semibold Italic Bold Bold Italic Bold Condensed Bold Condensed Italic(60 pt) g 4 Baskerville(164.5 pt Regular) Baskerville is a transitional serif typeface designed by John Baskerville in 1750.✳ (30 pt Regular) A B C D E F G H I J K L M N O P Q R S T U V W X Y Z (24 pt Regular) a b c d e f g h i j k l m n o p q r s t u v w x y z (30 pt Regular) ✳ 5 Baskerville ✳ Aa Aa (30 pt Regular) Aa Aa A B C D E F G H I J K L M N O P Q R S T U V W X Y Z Aa Aa (144 pt/ from left to right: Regular, Italic, Semidbold, Semibold Italic, Bold, Bold Italic) 6 Didot (168 pt Regular) Didot Didot Didot Didot& is a modern serif typeface designed by Didot Firmin Didot in 1784-1811.
    [Show full text]
  • Empower 3 Service Release 4
    *716006210* *Ver.01* Empower 3 Service Release 4 Release Notes 716006210 Copyright © Waters Corporation 2020 Version 01 (previously released as Rev.A) All rights reserved General information Copyright notice © 2020 WATERS CORPORATION. PRINTED IN THE UNITED STATES OF AMERICA AND IN IRELAND. ALL RIGHTS RESERVED. THIS DOCUMENT OR PARTS THEREOF MAY NOT BE REPRODUCED IN ANY FORM WITHOUT THE WRITTEN PERMISSION OF THE PUBLISHER. The information in this document is subject to change without notice and should not be construed as a commitment by Waters Corporation. Waters Corporation assumes no responsibility for any errors that may appear in this document. This document is believed to be complete and accurate at the time of publication. In no event shall Waters Corporation be liable for incidental or consequential damages in connection with, or arising from, its use. For the most recent revision of this document, consult the Waters website (www.waters.com). Trademarks CitrixTM is a registered trademark of Citrix Systems, Inc. and/or one or more of its subsidiaries, and may be registered in the United States Patent and Trademark Office and in other countries. EmpowerTM is a trademark of Waters Corporation. LAC/ETM is a trademark of Waters Corporation. Linux® is a registered trademark of Linus Torvalds. Oracle® is a registered trademark of Oracle Corporation and/or its affiliates. Red Hat® is a registered trademark of Red Hat, Inc. THE SCIENCE OF WHAT'S POSSIBLETM is a trademark of Waters Corporation. WatersTM is a trademark of Waters Corporation. Windows® is a registered trademark of Microsoft Corporation in the US and/or other countries.
    [Show full text]
  • Towards Left Duff S Mdbg Holt Winters Gai Incl Tax Drupal Fapi Icici
    jimportneoneo_clienterrorentitynotfoundrelatedtonoeneo_j_sdn neo_j_traversalcyperneo_jclientpy_neo_neo_jneo_jphpgraphesrelsjshelltraverserwritebatchtransactioneventhandlerbatchinsertereverymangraphenedbgraphdatabaseserviceneo_j_communityjconfigurationjserverstartnodenotintransactionexceptionrest_graphdbneographytransactionfailureexceptionrelationshipentityneo_j_ogmsdnwrappingneoserverbootstrappergraphrepositoryneo_j_graphdbnodeentityembeddedgraphdatabaseneo_jtemplate neo_j_spatialcypher_neo_jneo_j_cyphercypher_querynoe_jcypherneo_jrestclientpy_neoallshortestpathscypher_querieslinkuriousneoclipseexecutionresultbatch_importerwebadmingraphdatabasetimetreegraphawarerelatedtoviacypherqueryrecorelationshiptypespringrestgraphdatabaseflockdbneomodelneo_j_rbshortpathpersistable withindistancegraphdbneo_jneo_j_webadminmiddle_ground_betweenanormcypher materialised handaling hinted finds_nothingbulbsbulbflowrexprorexster cayleygremlintitandborient_dbaurelius tinkerpoptitan_cassandratitan_graph_dbtitan_graphorientdbtitan rexter enough_ram arangotinkerpop_gremlinpyorientlinkset arangodb_graphfoxxodocumentarangodborientjssails_orientdborientgraphexectedbaasbox spark_javarddrddsunpersist asigned aql fetchplanoriento bsonobjectpyspark_rddrddmatrixfactorizationmodelresultiterablemlibpushdownlineage transforamtionspark_rddpairrddreducebykeymappartitionstakeorderedrowmatrixpair_rddblockmanagerlinearregressionwithsgddstreamsencouter fieldtypes spark_dataframejavarddgroupbykeyorg_apache_spark_rddlabeledpointdatabricksaggregatebykeyjavasparkcontextsaveastextfilejavapairdstreamcombinebykeysparkcontext_textfilejavadstreammappartitionswithindexupdatestatebykeyreducebykeyandwindowrepartitioning
    [Show full text]
  • Installed Packages Gconf2.X86 64 3.2.6-8.El7 @Anaconda Geoip
    Installed Packages GConf2.x86_64 3.2.6-8.el7 @anaconda GeoIP.x86_64 1.5.0-11.el7 @anaconda ModemManager.x86_64 1.6.0-2.el7 @anaconda ModemManager-glib.x86_64 1.6.0-2.el7 @anaconda NetworkManager.x86_64 1:1.4.0-12.el7 @anaconda NetworkManager-adsl.x86_64 1:1.4.0-12.el7 @anaconda NetworkManager-glib.x86_64 1:1.4.0-12.el7 @anaconda NetworkManager-libnm.x86_64 1:1.4.0-12.el7 @anaconda NetworkManager-libreswan.x86_64 1.2.4-1.el7 @anaconda NetworkManager-libreswan-gnome.x86_64 1.2.4-1.el7 @anaconda NetworkManager-team.x86_64 1:1.4.0-12.el7 @anaconda NetworkManager-tui.x86_64 1:1.4.0-12.el7 @anaconda NetworkManager-wifi.x86_64 1:1.4.0-12.el7 @anaconda OpenEXR-libs.x86_64 1.7.1-7.el7 @anaconda PackageKit.x86_64 1.0.7-6.el7.centos @anaconda PackageKit-command-not-found.x86_64 1.0.7-6.el7.centos @anaconda PackageKit-glib.x86_64 1.0.7-6.el7.centos @anaconda PackageKit-gstreamer-plugin.x86_64 1.0.7-6.el7.centos @anaconda PackageKit-gtk3-module.x86_64 1.0.7-6.el7.centos @anaconda PackageKit-yum.x86_64 1.0.7-6.el7.centos @anaconda PyQt4.x86_64 4.10.1-13.el7 @anaconda PyYAML.x86_64 3.10-11.el7 @anaconda abattis-cantarell-fonts.noarch 0.0.16-3.el7 @anaconda abrt.x86_64 2.1.11-45.el7.centos @anaconda abrt-addon-ccpp.x86_64 2.1.11-45.el7.centos @anaconda abrt-addon-kerneloops.x86_64 2.1.11-45.el7.centos @anaconda abrt-addon-pstoreoops.x86_64 2.1.11-45.el7.centos @anaconda abrt-addon-python.x86_64 2.1.11-45.el7.centos @anaconda abrt-addon-vmcore.x86_64 2.1.11-45.el7.centos @anaconda abrt-addon-xorg.x86_64 2.1.11-45.el7.centos @anaconda abrt-cli.x86_64 2.1.11-45.el7.centos
    [Show full text]
  • Branding-Guide Für Ein Ruhiges, Professionelles Design Inspiration Aus Der Natur Die Authentischste Inspiration Bleibt Für Mich Die Natur
    Moodboard-Inspiration aus der Natur Branding-Guide für ein ruhiges, professionelles Design Inspiration aus der Natur Die authentischste Inspiration bleibt für mich die Natur. Aus meinen eigenen Fotos habe ich für dich verschie- -dene Design-Guides als Inspiration zusammen gestellt. Alle Guides haben eine sehr stimmige, professionelle Ausstrahlung und eignen sich ideal, wenn du mit deinem Branding ruhig auffallen willst. Hilfestellung Erläuterung zum Guide Hier sind zwei Schriften miteinander Das ist der Hex-Wert. Er definiert kombiniert: Einer Header-Schrift und einen bestimmten Farbwert. Du eine Schrift für den Fließtext. kannst den Wert z.B. bei der Ich habe lizenzfreie Schriften von Farbdefinition deiner Website Google Fonts ausgewählt, die du oder bei der Gestaltung auf kostenlos downloaden kannst. Canva einsetzen. ÜBERSCHRIFT #D6D7D4 Fließtext #E4CFBF4 #E3A87C #62584F Design Guide 1 Warm & Edel Überschrift »Lora« Farben in warmem Apricot, Nude Fließtext »Roboto« und Erdtönen. Sie vermitteln eine edle Wohlfühlatmosphäre. Überschriften #D6D7D4 Hier steht ein Fließtext, der gut lesbar ist. #E4CFBF #E3A87C #62584F Design Guide 1 Warm & Edel Designbeispiele Designs in warmen Farbtönen wirken auf die ruhige Art warm und edel. Vor allem, wenn man diese Töne und edlen Schriften mit viel Raum wirken lässt, hat mein einen beeindruckenden Effekt für sein Branding. Designbeispiele von Pinterest Design Guide 1 Warm & Edel Für wen eignet sich dieses Design? Ob Produkt oder Dientleistung – dieses Design hat etwas mit »Wohlfühlen« zu tun. Es hat einen sehr entspannten, sanften Charakter und wirkt bei eher mittleren bis hochpreisigen Angeboten. Wenn du dein Angebot auf eine sehr stilvolle, edle Weise präsentieren möchtest, kann dir dieses Design helfen, auf eine leise Art aufzufallen.
    [Show full text]
  • Beyond Trivial Counterfactual Generations with Diverse Valuable Explanations
    Under review as a conference paper at ICLR 2021 BEYOND TRIVIAL COUNTERFACTUAL GENERATIONS WITH DIVERSE VALUABLE EXPLANATIONS Anonymous authors Paper under double-blind review ABSTRACT Explainability of machine learning models has gained considerable attention within our research community given the importance of deploying more reliable machine-learning systems. Explanability can also be helpful for model debugging. In computer vision applications, most methods explain models by displaying the regions in the input image that they focus on for their prediction, but it is dif- ficult to improve models based on these explanations since they do not indicate why the model fail. Counterfactual methods, on the other hand, indicate how to perturb the input to change the model prediction, providing details about the model’s decision-making. Unfortunately, current counterfactual methods make ambiguous interpretations as they combine multiple biases of the model and the data in a single counterfactual interpretation of the model’s decision. Moreover, these methods tend to generate trivial counterfactuals about the model’s decision, as they often suggest to exaggerate or remove the presence of the attribute be- ing classified. Trivial counterfactuals are usually not valuable, since the informa- tion they provide is often already known to the system’s designer. In this work, we propose a counterfactual method that learns a perturbation in a disentangled latent space that is constrained using a diversity-enforcing loss to uncover mul- tiple valuable explanations about the model’s prediction. Further, we introduce a mechanism to prevent the model from producing trivial explanations. Experi- ments on CelebA and Synbols demonstrate that our model improves the success rate of producing high-quality valuable explanations when compared to previous state-of-the-art methods.
    [Show full text]
  • Technical Notes All Changes in Fedora 18
    Fedora 18 Technical Notes All changes in Fedora 18 Edited by The Fedora Docs Team Copyright © 2012 Red Hat, Inc. and others. The text of and illustrations in this document are licensed by Red Hat under a Creative Commons Attribution–Share Alike 3.0 Unported license ("CC-BY-SA"). An explanation of CC-BY-SA is available at http://creativecommons.org/licenses/by-sa/3.0/. The original authors of this document, and Red Hat, designate the Fedora Project as the "Attribution Party" for purposes of CC-BY-SA. In accordance with CC-BY-SA, if you distribute this document or an adaptation of it, you must provide the URL for the original version. Red Hat, as the licensor of this document, waives the right to enforce, and agrees not to assert, Section 4d of CC-BY-SA to the fullest extent permitted by applicable law. Red Hat, Red Hat Enterprise Linux, the Shadowman logo, JBoss, MetaMatrix, Fedora, the Infinity Logo, and RHCE are trademarks of Red Hat, Inc., registered in the United States and other countries. For guidelines on the permitted uses of the Fedora trademarks, refer to https:// fedoraproject.org/wiki/Legal:Trademark_guidelines. Linux® is the registered trademark of Linus Torvalds in the United States and other countries. Java® is a registered trademark of Oracle and/or its affiliates. XFS® is a trademark of Silicon Graphics International Corp. or its subsidiaries in the United States and/or other countries. MySQL® is a registered trademark of MySQL AB in the United States, the European Union and other countries. All other trademarks are the property of their respective owners.
    [Show full text]
  • Binghamton Regional Freight Study, 2008
    Binghamton Regional Freight Study final report prepared for Binghamton Metropolitan Transportation Study prepared by Cambridge Systematics, Inc. with Eng Wong Taub & Associates RL Banks & Associates, Inc. Global Insight (USA), Inc. September 2008 www.camsys.com final report Binghamton Regional Freight Study prepared for Binghamton Metropolitan Transportation Study prepared by Cambridge Systematics, Inc. 33 East 33rd Street, Suite 804 New York, NY 10016 September 2008 Binghamton Metropolitan Transportation Study Table of Contents Executive Summary .............................................................................................................. ES-1 1.0 National and Global Trends: Setting the Stage..................................................... 1-1 1.1 Long-Term Trends................................................................................................ 1-2 1.2 Recent Trends........................................................................................................ 1-5 1.3 Long-Term Perspective........................................................................................ 1-12 2.0 Economic Profile........................................................................................................... 2-1 2.1 Demographic Profile............................................................................................. 2-2 2.2 Industry Analysis.................................................................................................. 2-8 2.3 Looking to the Future – Economic Prospects
    [Show full text]
  • Oss NMC Rel9.Xlsx
    Open Source Software Packages for NMC XMP Release 9 Application License Publisher abattis-cantarell-fonts OFL https://git.gnome.org/browse/cantarell-fonts/ abrt GPLv2+ https://abrt.readthedocs.org/ abrt-addon-ccpp GPLv2+ https://abrt.readthedocs.org/ abrt-addon-kerneloops GPLv2+ https://abrt.readthedocs.org/ abrt-addon-pstoreoops GPLv2+ https://abrt.readthedocs.org/ abrt-addon-python GPLv2+ https://abrt.readthedocs.org/ abrt-addon-vmcore GPLv2+ https://abrt.readthedocs.org/ abrt-addon-xorg GPLv2+ https://abrt.readthedocs.org/ abrt-cli GPLv2+ https://abrt.readthedocs.org/ abrt-console-notification GPLv2+ https://abrt.readthedocs.org/ abrt-dbus GPLv2+ https://abrt.readthedocs.org/ abrt-desktop GPLv2+ https://abrt.readthedocs.org/ abrt-gui GPLv2+ https://abrt.readthedocs.org/ abrt-gui-libs GPLv2+ https://abrt.readthedocs.org/ abrt-libs GPLv2+ https://abrt.readthedocs.org/ abrt-python GPLv2+ https://abrt.readthedocs.org/ abrt-retrace-client GPLv2+ https://abrt.readthedocs.org/ abrt-tui GPLv2+ https://abrt.readthedocs.org/ accountsservice GPLv3+ https://www.freedesktop.org/wiki/Software/AccountsService/ accountsservice-libs GPLv3+ https://www.freedesktop.org/wiki/Software/AccountsService/ acl GPLv2+ http://acl.bestbits.at/ adcli LGPLv2+ http://cgit.freedesktop.org/realmd/adcli adwaita-cursor-theme LGPLv3+ or CC-BY-SA http://www.gnome.org adwaita-gtk2-theme LGPLv2+ https://gitlab.gnome.org/GNOME/gnome-themes-extra adwaita-icon-theme LGPLv3+ or CC-BY-SA http://www.gnome.org adwaita-qt5 LGPLv2+ https://github.com/MartinBriza/adwaita-qt aic94xx-firmware
    [Show full text]
  • Oracle® Fusion Middleware 1 Using This Document with the Certification
    Oracle® Fusion Middleware System Requirements and Specifications for Oracle Forms and Reports 11g Release 2 (11.1.2) E25460-01 January 2017 This document contains system and platform-specific information for Oracle Fusion Middleware Forms and Reports 11g Release 2 (11.1.2) and later. The following topics are covered in this document: ■ Section 1, "Using This Document with the Certification Matrix and Product Installation Guide" ■ Section 2, "Oracle Fusion Middleware Memory and Space Requirements" ■ Section 3, "Oracle Weblogic Server and JDK Considerations" ■ Section 4, "Oracle Universal Installer (OUI) Requirements" ■ Section 5, "Oracle Fusion Middleware Network Requirements" ■ Section 6, "System Requirements for UNIX Operating Systems" ■ Section 7, "System Requirements for Windows Operating Systems" ■ Section 8, "Documentation Accessibility" 1 Using This Document with the Certification Matrix and Product Installation Guide This document is intended for use in conjunction with the Oracle Fusion Middleware Installation Guide for Oracle Forms and Reports and the Oracle Fusion Middleware 11g Release 2 Certifications. Task 1 Find Out What is Certified The following certification documents should be used to determine the proper combination of systems, database, clients, Identity and Access Management, and IP version that should be used for your product installation: ■ System Requirements and Supported Platforms for Oracle Forms and Reports 11g Release 2 (11.1.2.0.0) Certification Matrix ■ System Requirements and Supported Platforms for Oracle Forms and Reports 11g Release 2 (11.1.2.1.0) Certification Matrix ■ System Requirements and Supported Platforms for Oracle Forms and Reports 11g Release 2 (11.1.2.2.0) Certification Matrix ORACLE CONFIDENTIAL. For authorized use only.
    [Show full text]